Borland VisiBroker Smart Agent Multiple Remote Vulnerabilities

Bugtraq ID:	28084
Class:	Unknown
CVE:	CVE-2008-7127 CVE-2008-7126
Remote:	Yes
Local:	No
Published:	Mar 03 2008 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	Borland VisiBroker Smart Agent 08.00.00.C1.03
Not Vulnerable:

Borland VisiBroker Smart Agent Multiple Remote Vulnerabilities

Borland VisiBroker Smart Agent is prone to multiple remote vulnerabilities, including a heap-based buffer-overflow issue and a denial-of-service issue.

A successful exploit will allow remote attackers to execute arbitrary code in the context of the affected software or to crash the affected application, denying service to legitimate users.

These issues affect Borland VisiBroker Smart Agent 08.00.00.C1.03; other versions may also be affected.

Borland VisiBroker Smart Agent Multiple Remote Vulnerabilities

The following proof of concept is available:

• /data/vulnerabilities/exploits/visibroken.zip

Borland VisiBroker Smart Agent Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Borland VisiBroker Smart Agent Multiple Remote Vulnerabilities

References:

• Borland VisiBroker Smart Agent Homepage (Borland)